Abstract:Control and communication technologies are key building blocks of cyber-physical systems (CPSes) that can improve the efficiency of the physical processes. However, they also make a CPS vulnerable to cyberattacks that can cause disruptions or even severe damage. This article focuses on one particular type of CPS cyberattack, namely the time delay attack (TDA), which exploits vulnerabilities in the communication channels to cause potentially serious harm to the system. Much work proposed for TDA detection is tested offline only and under strong assumptions. In order to construct a practical solution to deal with real-world scenarios, we propose a deep learning-based method to detect and characterize TDA. Specifically, we design a hierarchical long short-term memory model to process raw data streams from relevant CPS sensors online and continually monitor embedded signals in the data to detect and characterize the attack. Moreover, various strategies of interpreting the outputs of the model are proposed, which allow the user to tune the performance based on different objectives. We evaluate our model on two representative types of CPS, namely power plant control system (PPCS) and automatic generation control (AGC).Code and dataset can be found at: https://github.com/prakharg24/tda For TDA detection, our solution achieves an accuracy of 92% in PPCS, compared with 81% by random forests (RFs) and 72% by k-nearest neighbours (kNNs). For AGC, our solution achieves 98% accuracy, compared with 74% by RFs and 71% by kNNs. It also reduces the mean absolute error in the delay value characterization from about six to two seconds in the PPCS, and from about three seconds to half a second in the AGC, with about 3x to 4x shorter reaction latency in both systems.

Real-Time Attack-Recovery for Cyber-Physical Systems Using Linear Approximations

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Filter-based Detection and Location of Dynamic Load Altering Attack in Power Cyber-Physical Systems

Real-Time Data-Predictive Attack-Recovery for Complex Cyber-Physical Systems

Fast Attack Recovery for Stochastic Cyber-Physical Systems

Recovery from Adversarial Attacks in Cyber-physical Systems: Shallow, Deep and Exploratory Works

Real-time Cyber-Physical Security Solution Leveraging an Integrated Learning-Based Approach

Adaptive Resilient Neural Control of Uncertain Time-Delay Nonlinear CPSs with Full-State Constraints under Deception Attacks

Sparse Actuator and Sensor Attacks Reconstruction for Linear Cyber-Physical Systems with Sliding Mode Observer

Optimal Linear Attack in Cyber-Physical Systems with Periodic Detection

Adaptive Resilient Control of Cyber-Physical Systems Under Actuator and Sensor Attacks

Integrating Cyber-Attack Defense Techniques into Real-Time Cyber-Physical Systems

LQ Secure Control for Cyber-Physical Systems Against Sparse Sensor and Actuator Attacks

Integrity Attacks On Cyber-Physical Systems

State estimation and self-triggered control of CPSs against joint sensor and actuator attacks

Decentralized Adaptive Secure Control of Uncertain Nonlinear Time-Varying Interconnected Systems Against Sensor and Actuator Attacks

Event-triggered resilient control for cyber-physical system under denial-of-service attacks

Learning-Based Simultaneous Detection and Characterization of Time Delay Attack in Cyber-Physical Systems

Improved Adaptive Resilient Control Against Sensor and Actuator Attacks

Adaptive Tracking Control of Unknown State Target for CPSs Subjected to Cyberattacks.